Hi all, I created a connection event policy on my network sensors to monitor connections from all on udp source port 2090 to all on udp destination port 2090. There are many connections on this port between 2 hosts. ISS alerted once when A 2090 -> B 2090 and once more when B 2090 -> A 2090. Although the same 2 hosts continue to connect to each other on these ports, no more alerts are generated. Why does ISS only alert once for the initial connection and not again for connections there after? Owen. _______________________________________________ ISSForum mailing list [EMAIL PROTECTED]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
